[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6NAJXSRV4AF0V3V14XNTWFR":3,"skill-same:01M6NAJXSRV4AF0V3V14XNTWFR":182},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":44,"linkOnly":45,"markdownContent":46,"markdownBody":47,"frontMatter":48,"refName":49,"commitSha":50,"skillDirectory":51,"forksCount":52,"repositoryHtmlUrl":53,"repositoryHomepageUrl":6,"ownerHtmlUrl":54,"ownerBlogUrl":55,"ownerDescription":56,"updatedAt":57,"install":58,"resources":71},"01M6NAJXSRV4AF0V3V14XNTWFR","yao-websecurity-skill",null,"Use when auditing an authorized website, SaaS, API, AI app, local code path, GitHub repo, staging URL, or owned runtime for security risks, vulnerability checklist scoring, static review, dynamic review, active validation, or Chinese security reports.","yaojingang\u002Fyao-open-skills","yaojingang","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F266242792?v=4","01M6NAAAGEYJRQMH0EG9RPEB87","YAO","01M6NAAAQN6XT86CR7FS561QF1",1327,"MIT","https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"yao websecurity skill","yao","chinese","static","for","URL","app","runtime","local","scoring","review","reports","static review","use","repo","api","vulnerability","saas","code","github","2026-11-10 10:12:30",false,"---\nname: yao-websecurity-skill\ndescription: Use when auditing an authorized website, SaaS, API, AI app, local code path, GitHub repo, staging URL, or owned runtime for security risks, vulnerability checklist scoring, static review, dynamic review, active validation, or Chinese security reports.\n---\n\n# Yao Websecurity Skill\n\n## Use\n\nUse when the user gives a local path, archive, GitHub repo, staging URL, or owned runtime and wants a defensive website security audit, vulnerability checklist review, scorecard, remediation plan, static review, dynamic review, active validation, or Excel\u002FHTML\u002FMarkdown\u002FPDF report.\n\nDo not use for unauthorized targets, exploit development, credential theft, stealth, malware, third-party public-target scanning, or bypass instructions.\n\n## Required Reading\n\n- `references\u002Fsecurity-audit-method.md`\n- `references\u002Freport-contract.md`\n- `references\u002Freview-modes.md`\n- `references\u002Fvulnerability-ontology.csv`\n- `references\u002Fscanner-registry.md`\n\n## Workflow\n\n1. Confirm mode, scope, authorization, environment, intensity, forbidden actions, test accounts, rate limits, rollback\u002Freset plan, and whether online targets are allowed. Without active-test authorization, use `static`.\n2. Prepare an isolated workdir before review: `python3 scripts\u002Fsecurity_audit_report.py prepare-env --source \"\u003Cpath-or-url>\" --workdir \"\u003Cfresh-temp-workdir>\" --project \"\u003Cname>\" --mode \"\u003Cmode>\"`. Local and GitHub targets must be copied or cloned into this fresh temp directory; never install, build, migrate, write reports, or mutate the original source tree.\n3. For `dynamic-safe`, `dynamic-active`, `hybrid`, or `online-authorized`, configure only temporary secrets, test DB, synthetic accounts\u002Fdata, loopback or isolated containers, OOB endpoint if authorized, and stop conditions. Destructive file operations, DB writes, brute-force resilience, resource pressure, and blind SSRF\u002FOOB tests default to the isolated temp deployment.\n4. Inventory the isolated `target-source` with `rg --files`, manifests, routes\u002FAPI definitions, auth\u002Fsession modules, data models, configs, Docker\u002FIaC, CI\u002FCD, and AI\u002FLLM integrations. Record unreadable, generated, vendor, or excluded paths.\n5. Create the review skeleton: `python3 scripts\u002Fsecurity_audit_report.py init --project \"\u003Cname>\" --source \"\u003Cfresh-temp-workdir>\u002Ftarget-source\" --mode \"\u003Cmode>\" --intensity \"\u003Cintensity>\" --out \"\u003Cfresh-temp-workdir>\u002Fsecurity_review.json\"`.\n6. Triage `V001-V275` by observed attack surface. Mark irrelevant items `Not Applicable` with a short reason; deep-audit only applicable or unclear items, grouped by domain and priority. Do not spend review budget testing vulnerability families that are not represented in the code, framework, runtime, or deployment model.\n7. Execute only the selected mode. Static means code\u002Fconfig\u002Fpassive review. Dynamic-safe means runtime and passive DAST against temp deployment. Dynamic-active may run blind\u002FOOB, capped brute-force, file mutation, DB writes, and resource-pressure tests only inside temp deployment unless explicit online authorization states otherwise. If a runtime gate is missing, mark affected checks `Unclear` or `Deferred`, not `Safe`.\n8. Render artifacts: `python3 scripts\u002Fsecurity_audit_report.py render --review \"\u003Cworkdir>\u002Fsecurity_review.json\" --out-dir \"\u003Cworkdir>\u002Fsecurity-audit-report\"`.\n9. Return the absolute `.xlsx`, `.html`, `.md`, and `.pdf` paths, selected mode, selected risk domains, P0\u002FP1 findings, unclear items, coverage gaps, runtime assumptions, and active-test evidence.\n\n## Output Contract\n\nDefault outputs are `安全审查评分表.xlsx`, `安全审查报告.html`, `安全审查报告.md`, `安全审查报告.pdf`, and `security_review.sanitized.json`, written outside the audited source tree. Report content is Simplified Chinese by default. Excel must use Chinese labels and Chinese row-level interpretations for verdict, evidence, finding, impact, and remediation, while preserving code identifiers and paths as-is. HTML must include a right-side language toggle with Chinese as the default view and English as the alternate view, plus a sticky top navigation menu for major sections. Markdown is generated from the same Chinese scorecard\u002Freport content used by Excel. PDF is a Chinese-first browsing copy optimized for quick review and should use browser\u002FHTML print rendering when available for stable typography and page breaks. Follow `references\u002Freport-contract.md` for review-mode, isolation, and presentation standards. Evidence must be sanitized: no plaintext secrets, cookies, reusable tokens, personal data dumps, or destructive proof steps.\n\n## Reference Map\n\n- `scripts\u002Fsecurity_audit_report.py`: prepare-env\u002Finit\u002Fextract\u002Frender.\n- `templates\u002Freview-template.json`: review shape.\n- `evals\u002F`: route boundaries.\n- `reports\u002F`: reference, output-risk, artifact profiles.\n","# Yao Websecurity Skill\n\n## Use\n\nUse when the user gives a local path, archive, GitHub repo, staging URL, or owned runtime and wants a defensive website security audit, vulnerability checklist review, scorecard, remediation plan, static review, dynamic review, active validation, or Excel\u002FHTML\u002FMarkdown\u002FPDF report.\n\nDo not use for unauthorized targets, exploit development, credential theft, stealth, malware, third-party public-target scanning, or bypass instructions.\n\n## Required Reading\n\n- `references\u002Fsecurity-audit-method.md`\n- `references\u002Freport-contract.md`\n- `references\u002Freview-modes.md`\n- `references\u002Fvulnerability-ontology.csv`\n- `references\u002Fscanner-registry.md`\n\n## Workflow\n\n1. Confirm mode, scope, authorization, environment, intensity, forbidden actions, test accounts, rate limits, rollback\u002Freset plan, and whether online targets are allowed. Without active-test authorization, use `static`.\n2. Prepare an isolated workdir before review: `python3 scripts\u002Fsecurity_audit_report.py prepare-env --source \"\u003Cpath-or-url>\" --workdir \"\u003Cfresh-temp-workdir>\" --project \"\u003Cname>\" --mode \"\u003Cmode>\"`. Local and GitHub targets must be copied or cloned into this fresh temp directory; never install, build, migrate, write reports, or mutate the original source tree.\n3. For `dynamic-safe`, `dynamic-active`, `hybrid`, or `online-authorized`, configure only temporary secrets, test DB, synthetic accounts\u002Fdata, loopback or isolated containers, OOB endpoint if authorized, and stop conditions. Destructive file operations, DB writes, brute-force resilience, resource pressure, and blind SSRF\u002FOOB tests default to the isolated temp deployment.\n4. Inventory the isolated `target-source` with `rg --files`, manifests, routes\u002FAPI definitions, auth\u002Fsession modules, data models, configs, Docker\u002FIaC, CI\u002FCD, and AI\u002FLLM integrations. Record unreadable, generated, vendor, or excluded paths.\n5. Create the review skeleton: `python3 scripts\u002Fsecurity_audit_report.py init --project \"\u003Cname>\" --source \"\u003Cfresh-temp-workdir>\u002Ftarget-source\" --mode \"\u003Cmode>\" --intensity \"\u003Cintensity>\" --out \"\u003Cfresh-temp-workdir>\u002Fsecurity_review.json\"`.\n6. Triage `V001-V275` by observed attack surface. Mark irrelevant items `Not Applicable` with a short reason; deep-audit only applicable or unclear items, grouped by domain and priority. Do not spend review budget testing vulnerability families that are not represented in the code, framework, runtime, or deployment model.\n7. Execute only the selected mode. Static means code\u002Fconfig\u002Fpassive review. Dynamic-safe means runtime and passive DAST against temp deployment. Dynamic-active may run blind\u002FOOB, capped brute-force, file mutation, DB writes, and resource-pressure tests only inside temp deployment unless explicit online authorization states otherwise. If a runtime gate is missing, mark affected checks `Unclear` or `Deferred`, not `Safe`.\n8. Render artifacts: `python3 scripts\u002Fsecurity_audit_report.py render --review \"\u003Cworkdir>\u002Fsecurity_review.json\" --out-dir \"\u003Cworkdir>\u002Fsecurity-audit-report\"`.\n9. Return the absolute `.xlsx`, `.html`, `.md`, and `.pdf` paths, selected mode, selected risk domains, P0\u002FP1 findings, unclear items, coverage gaps, runtime assumptions, and active-test evidence.\n\n## Output Contract\n\nDefault outputs are `安全审查评分表.xlsx`, `安全审查报告.html`, `安全审查报告.md`, `安全审查报告.pdf`, and `security_review.sanitized.json`, written outside the audited source tree. Report content is Simplified Chinese by default. Excel must use Chinese labels and Chinese row-level interpretations for verdict, evidence, finding, impact, and remediation, while preserving code identifiers and paths as-is. HTML must include a right-side language toggle with Chinese as the default view and English as the alternate view, plus a sticky top navigation menu for major sections. Markdown is generated from the same Chinese scorecard\u002Freport content used by Excel. PDF is a Chinese-first browsing copy optimized for quick review and should use browser\u002FHTML print rendering when available for stable typography and page breaks. Follow `references\u002Freport-contract.md` for review-mode, isolation, and presentation standards. Evidence must be sanitized: no plaintext secrets, cookies, reusable tokens, personal data dumps, or destructive proof steps.\n\n## Reference Map\n\n- `scripts\u002Fsecurity_audit_report.py`: prepare-env\u002Finit\u002Fextract\u002Frender.\n- `templates\u002Freview-template.json`: review shape.\n- `evals\u002F`: route boundaries.\n- `reports\u002F`: reference, output-risk, artifact profiles.\n",{"name":5,"description":7},"main","5126d4b5500a2f7d447fbe453297507d200b042e","skills\u002Fyao-websecurity-skill",145,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills","https:\u002F\u002Fgithub.com\u002Fyaojingang","www.laoyao.cn","AI Marketing · GEO · EdTech · Business · AI Entrepreneurship","2026-10-14 18:44:53",{"source":8,"skillName":5,"commands":59,"prompt":69,"zipAvailable":70},[60,63,66],{"tool":61,"command":62},"npx","npx skills add yaojingang\u002Fyao-open-skills --skill yao-websecurity-skill",{"tool":64,"command":65},"bunx","bunx skills add yaojingang\u002Fyao-open-skills --skill yao-websecurity-skill",{"tool":67,"command":68},"pnpm","pnpm dlx skills add yaojingang\u002Fyao-open-skills --skill yao-websecurity-skill","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002FSKILL.md",true,[72,78,82,86,90,94,98,102,108,112,116,120,124,128,132,136,140,144,148,152,156,160,164,168,174,178],{"path":73,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":76,"sourceHtmlUrl":77},"agents\u002Finterface.yaml","REFERENCE","参考文档",941,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fagents\u002Finterface.yaml",{"path":79,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":80,"sourceHtmlUrl":81},"evals\u002Fsemantic_config.json",6549,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fevals\u002Fsemantic_config.json",{"path":83,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":84,"sourceHtmlUrl":85},"evals\u002Ftrigger_cases.json",3570,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fevals\u002Ftrigger_cases.json",{"path":87,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":88,"sourceHtmlUrl":89},"examples\u002Ffictional-starbridge-audit\u002FREADME.md",1437,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fexamples\u002Ffictional-starbridge-audit\u002FREADME.md",{"path":91,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":92,"sourceHtmlUrl":93},"examples\u002Ffictional-starbridge-audit\u002Fsecurity_review.sanitized.json",488785,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fexamples\u002Ffictional-starbridge-audit\u002Fsecurity_review.sanitized.json",{"path":95,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":96,"sourceHtmlUrl":97},"examples\u002Ffictional-starbridge-audit\u002F安全审查报告.html",785287,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fexamples\u002Ffictional-starbridge-audit\u002F安全审查报告.html",{"path":99,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":100,"sourceHtmlUrl":101},"examples\u002Ffictional-starbridge-audit\u002F安全审查报告.md",279590,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fexamples\u002Ffictional-starbridge-audit\u002F安全审查报告.md",{"path":103,"resourceType":104,"resourceTypeDesc":105,"sizeBytes":106,"sourceHtmlUrl":107},"examples\u002Ffictional-starbridge-audit\u002F安全审查报告.pdf","ASSET","资产文件",2754309,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fexamples\u002Ffictional-starbridge-audit\u002F安全审查报告.pdf",{"path":109,"resourceType":104,"resourceTypeDesc":105,"sizeBytes":110,"sourceHtmlUrl":111},"examples\u002Ffictional-starbridge-audit\u002F安全审查评分表.xlsx",102365,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fexamples\u002Ffictional-starbridge-audit\u002F安全审查评分表.xlsx",{"path":113,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":114,"sourceHtmlUrl":115},"examples\u002Fsample-review-note.md",539,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fexamples\u002Fsample-review-note.md",{"path":117,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":118,"sourceHtmlUrl":119},"manifest.json",1203,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fmanifest.json",{"path":121,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":122,"sourceHtmlUrl":123},"README.md",7975,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002FREADME.md",{"path":125,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":126,"sourceHtmlUrl":127},"references\u002Freport-contract.md",12008,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Freferences\u002Freport-contract.md",{"path":129,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":130,"sourceHtmlUrl":131},"references\u002Freview-modes.md",2465,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Freferences\u002Freview-modes.md",{"path":133,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":134,"sourceHtmlUrl":135},"references\u002Fscanner-registry.md",3816,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Freferences\u002Fscanner-registry.md",{"path":137,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":138,"sourceHtmlUrl":139},"references\u002Fsecurity-audit-method.md",8748,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Freferences\u002Fsecurity-audit-method.md",{"path":141,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":142,"sourceHtmlUrl":143},"references\u002Fsource-benchmark-scan.md",2529,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Freferences\u002Fsource-benchmark-scan.md",{"path":145,"resourceType":104,"resourceTypeDesc":105,"sizeBytes":146,"sourceHtmlUrl":147},"references\u002Fvulnerability-ontology.csv",37939,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Freferences\u002Fvulnerability-ontology.csv",{"path":149,"resourceType":104,"resourceTypeDesc":105,"sizeBytes":150,"sourceHtmlUrl":151},"references\u002F网站安全审查AI_Skill设计与漏洞知识库报告.docx",74531,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Freferences\u002F网站安全审查AI_Skill设计与漏洞知识库报告.docx",{"path":153,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":154,"sourceHtmlUrl":155},"reports\u002Fartifact-design-profile.md",1988,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Freports\u002Fartifact-design-profile.md",{"path":157,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":158,"sourceHtmlUrl":159},"reports\u002Foutput-risk-profile.md",1886,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Freports\u002Foutput-risk-profile.md",{"path":161,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":162,"sourceHtmlUrl":163},"reports\u002Freference-synthesis.md",1104,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Freports\u002Freference-synthesis.md",{"path":165,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":166,"sourceHtmlUrl":167},"reports\u002Fvalidation-results.md",1787,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Freports\u002Fvalidation-results.md",{"path":169,"resourceType":170,"resourceTypeDesc":171,"sizeBytes":172,"sourceHtmlUrl":173},"scripts\u002Fsecurity_audit_report.py","SCRIPT","脚本",110627,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Fscripts\u002Fsecurity_audit_report.py",{"path":175,"resourceType":74,"resourceTypeDesc":75,"sizeBytes":176,"sourceHtmlUrl":177},"templates\u002Freview-template.json",1913,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Ftemplates\u002Freview-template.json",{"path":179,"resourceType":170,"resourceTypeDesc":171,"sizeBytes":180,"sourceHtmlUrl":181},"tests\u002Ftest_security_audit_report.py",9531,"https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-websecurity-skill\u002Ftests\u002Ftest_security_audit_report.py",[183,200,231,263,287,310],{"skillNo":184,"name":185,"nameZh":6,"description":186,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":187,"categories":188,"keywords":190,"publishedAt":44},"01M6NAK39QXA6XAWDS49J46GG5","yao-weread-skill","当用户需要分析微信读书阅读历史、生成读书报告、可视化阅读统计、笔记、书架、词云、热力图、雷达图，或导出精排 HTML 报告时使用。也适用于创建 AI 创业者示例阅读报告。不用于通用图书推荐，或不生成报告的原始微信读书 API 查询。","https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-weread-skill\u002FSKILL.md",[189],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[25,191,192,39,193,194,195,196,197,198,199],"weread","yao weread skill","生成","统计","html","可视化","微信","笔记","报告",{"skillNo":201,"name":202,"nameZh":6,"description":203,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":204,"categories":205,"keywords":213,"publishedAt":44},"01M6NAJJW8A9AST63087GXNSAC","yao-tutorial-skill","Create standalone beginner tutorial packages from a topic or supplied references, with adaptive research, course-style outline design, chapter visuals, and Markdown\u002FDOCX\u002FPDF\u002FHTML exports. Use for textbook-like tutorials, course guides, teaching documents, or long beginner guides; not for quick answers, link summaries, pure diagrams, or file conversion.","https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-tutorial-skill\u002FSKILL.md",[206,209,212],{"categoryNo":207,"categoryName":208,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000002","文档处理",{"categoryNo":210,"categoryName":211,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000021","资料检索与研究",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[214,25,215,216,217,218,219,220,221,37,222,223,224,225,226,227,228,229,28,230],"tutorial","yao tutorial skill","docx","PDF","design","visuals","documents","file","conversion","diagrams","teaching","long","guides","course","quick","standalone","adaptive",{"skillNo":232,"name":233,"nameZh":6,"description":234,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":235,"categories":236,"keywords":247,"publishedAt":44},"01M6NAJC12NHG126M3B7TRYJ83","yao-positioning-skill","Generate evidence-aware positioning reports for personal IPs, courses, products, services, brands, or companies by combining positioning theory, course-marketing analysis, user intent, competitor research, market demand, and verifiable advantages. Use when users ask for 定位、差异化分析、优势分析、心智定位、品类定位、竞品定位研究、定位报告或再定位建议. Do not use for slogan-only copywriting, generic marketing ideas, standalone market research without a positioning recommendation, or brand knowledge-base construction.","https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-positioning-skill\u002FSKILL.md",[237,240,241,242],{"categoryNo":238,"categoryName":239,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000019","营销推广",{"categoryNo":210,"categoryName":211,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":243,"categoryName":244,"taxonomyType":245,"taxonomyTypeDesc":246},"01JBSEEDCAT000000000000035","市场营销","PROFESSION","适用职业",[248,25,249,250,251,252,253,254,255,256,37,257,258,259,260,261,262,227,229,28],"positioning","yao positioning skill","marketing ideas","ips","analysis","team","knowledge","brand","ask","only","evidence","Market","do","ideas","recommendation",{"skillNo":264,"name":265,"nameZh":6,"description":266,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":267,"categories":268,"keywords":270,"publishedAt":44},"01M6NAJ57CWWHEZABBR6K9KDVX","yao-open-skills-sync","Manage the yao-open-skills public collection. Use this skill whenever the user wants to evaluate whether a local skill should be open sourced, import a local skill into the yao-open-skills repository, register which skills are already public, track GitHub sync status, or update the collection README and catalog after adding or refreshing a skill.","https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-open-skills-sync\u002FSKILL.md",[269],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[271,272,25,273,274,43,275,276,277,278,279,280,37,281,32,282,283,284,285,286],"sync","open","skills sync","yao open skills sync","status","update","repository","collection","README","catalog","manage","register","import","which","evaluate","track",{"skillNo":288,"name":289,"nameZh":6,"description":290,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":291,"categories":292,"keywords":293,"publishedAt":44},"01M6NAHYSPKG0GC8SHRD8QHP05","yao-naval-almanack-skill","Improve career choices, service\u002Fproductization, reusable income\u002Fownership, long-term partnerships, attention allocation, and desire\u002Fsocial-comparison tradeoffs using Naval principles, even without naming Naval. 中文：工作选择、找专长、重复交付产品化、长期合作、忙却无积累、目标取舍、同龄人比较。Also explain, verify, and apply 《纳瓦尔宝典》, Naval Ravikant, or quotes. Use for substantive advice; skip generic planning\u002Fediting, coding, arithmetic, vague anxiety, trading, clinical care, and passing name mentions. Honor explicit opt-outs.","https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-naval-almanack-skill\u002FSKILL.md",[],[25,294,295,296,297,298,299,37,300,301,302,303,225,304,305,306,307,28,308,309],"yao naval almanack skill","planning","improve","中文","explain","editing","reusable","social","attention","clinical","attention allocation","comparison","quotes","anxiety","vague","apply",{"skillNo":311,"name":312,"nameZh":6,"description":313,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":314,"categories":315,"keywords":320,"publishedAt":44},"01M6NAHRA5GD8WS590S05EZDAD","yao-kelly-skill","Turn uncertain resource-allocation requests into practical action plans using Kelly sizing as a conservative allocation engine. Use when a user needs to decide whether an opportunity is suitable for Kelly, what minimum action package to run, how much resource to cap, when to add or stop, and how to review results. Do not use for pure formula tutoring, guaranteed-return claims, martingale escalation, or final licensed investment, legal, or tax advice.","https:\u002F\u002Fgithub.com\u002Fyaojingang\u002Fyao-open-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyao-kelly-skill\u002FSKILL.md",[316,317],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":318,"categoryName":319,"taxonomyType":245,"taxonomyTypeDesc":246},"01JBSEEDCAT000000000000037","律师与法务",[25,321,34,322,323,324,325,326,37,327,328,329,260,330,331,332,333,334,335,28],"yao kelly skill","package","escalation","engine","decide","results","formula","review results","cap","practical","opportunity","plans","as","how to","claims"]